Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa
File:                     a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa (raw, json)
Hash identifier:          R3BvKPw2JHeUQRV4/nJqg1r5D9OwZVeDR++5N0138pE=
Subject key identifier:   47:67:28:2F:45:16:6B:40:E4:3F:88:81:0E:4E:AD:65:D1:D0:99:57
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584DA6B0147218BFFA7462E25E40
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13807
IP address blocks:        24.51.32.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:14:72:18:bf:fa:74:62:e2:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=14da516b-6985-49c1-b06f-257e5afd8d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:ef:5d:d8:3a:bb:fe:61:12:84:a2:fb:f4:
                    cb:19:17:e2:02:20:06:1f:44:ee:b4:64:68:12:82:
                    bb:ec:ee:30:e8:06:41:dc:f4:81:b5:c0:8c:b5:6a:
                    d9:e6:7c:a5:53:52:fb:f0:74:96:ab:34:70:c5:6e:
                    61:50:a0:f4:e2:2e:c0:27:c3:7d:03:64:3b:76:55:
                    b1:aa:26:88:55:ea:a4:1a:2f:99:6c:c2:4e:af:22:
                    fe:f6:8e:f8:d9:7b:21:b1:1a:4e:d9:78:0c:32:7a:
                    fb:dd:38:95:0a:4a:54:f4:fb:59:ac:d1:5e:d0:41:
                    3e:70:da:59:a8:d8:9f:50:ce:41:5f:8a:c7:e9:1f:
                    0d:23:21:3f:49:b3:0d:c2:a3:ab:c2:ca:1a:fb:e0:
                    84:a9:f8:4c:6d:66:33:ef:fb:dd:30:ad:ef:13:e8:
                    2e:45:b8:7c:55:ed:1a:1f:3d:07:6d:7c:c4:9d:bb:
                    db:a2:d9:69:f7:0c:53:42:bb:44:f3:b7:f1:d3:6c:
                    48:27:80:52:cb:31:db:11:b5:70:19:9e:9c:1f:f5:
                    ae:05:74:ef:af:59:5e:3c:92:25:22:58:39:24:09:
                    81:4d:c0:fa:48:99:f8:c8:67:50:01:99:62:1d:c5:
                    a2:83:7a:55:82:fb:36:6f:98:1d:85:bf:7f:0a:c0:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:28:2F:45:16:6B:40:E4:3F:88:81:0E:4E:AD:65:D1:D0:99:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:d5:dc:fe:2b:3a:1e:48:5a:90:25:b3:be:39:04:37:6f:
         cf:1a:0f:ac:ac:0f:5e:10:6a:c4:24:aa:58:4f:b2:49:e3:e7:
         51:7e:01:ef:cf:06:04:2e:b6:7b:36:43:35:3a:1d:00:98:57:
         b6:65:d1:50:46:55:3e:db:f0:72:4c:2d:b8:23:73:20:21:16:
         a8:42:a4:fa:00:86:c4:20:76:f8:62:22:12:95:93:83:f1:12:
         10:71:1a:f3:42:4a:fa:8d:c2:09:34:7b:da:f0:1f:1e:d7:5a:
         92:d6:58:21:06:40:92:0c:20:7a:57:e4:cd:a3:bf:c8:20:eb:
         6a:d3:62:59:3d:59:79:7a:21:bd:ce:36:78:4e:db:3e:61:2e:
         ce:d6:03:b9:29:99:0a:fc:aa:d8:bf:6b:4d:1d:a4:7a:07:17:
         df:fd:e0:45:67:62:24:ca:3f:09:d0:a7:d1:a4:11:de:08:bc:
         c7:01:cd:e4:09:f8:95:42:86:5c:e5:0b:04:20:90:d3:5c:1e:
         3f:18:b0:b8:65:ee:47:0d:ac:35:2e:46:e8:56:06:0b:4a:44:
         35:11:ac:0b:2d:ed:5b:57:9d:3a:07:0b:5a:46:4f:ae:e4:94:
         29:9d:5b:74:3f:44:02:5f:b7:ef:58:15:e2:90:b0:9c:27:fd:
         bc:40:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:53:00 2026 by rpki-client